Class KeyType.CertUtils

  • Enclosing class:
    KeyType

    public static class KeyType.CertUtils
    extends java.lang.Object
    • Constructor Summary

      Constructors 
      Constructor Description
      CertUtils()  
    • Method Summary

      Modifier and Type Method Description
      static boolean matchPattern​(java.lang.String target, java.lang.String pattern)
      This method must work exactly as match_pattern from match.c of OpenSSH.
      static java.lang.String verifyHostCertificate​(byte[] certRaw, Certificate<?> cert, java.lang.String hostname)  
      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
    • Constructor Detail

      • CertUtils

        public CertUtils()
    • Method Detail

      • verifyHostCertificate

        public static java.lang.String verifyHostCertificate​(byte[] certRaw,
                                                             Certificate<?> cert,
                                                             java.lang.String hostname)
                                                      throws Buffer.BufferException,
                                                             SSHRuntimeException
        Parameters:
        certRaw - Already serialized host certificate that was received as a packet. Can be restored simply by calling new Buffer.PlainBuffer().putPublicKey(cert)
        cert - A key with a certificate received from a server.
        hostname - A hostname of the server. It is juxtaposed to the principals of the certificate.
        Returns:
        null if the certificate is valid, an error message if it is not valid.
        Throws:
        Buffer.BufferException - If something from certRaw or cert can't be parsed.
        SSHRuntimeException
      • matchPattern

        public static boolean matchPattern​(java.lang.String target,
                                           java.lang.String pattern)
        This method must work exactly as match_pattern from match.c of OpenSSH. If it works differently, consider it as a bug that must be fixed.